Navigate

CCI-003184

CCI-003184 Definition

Require an independent agent satisfying organization-defined independence criteria to verify the evidence produced during security testing and evaluation.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003184.

Control	Description
SA-11(3)	The organization: (a): Requires an independent agent satisfying [one of ] to verify the correct implementation of the developer security assessment plan and the evidence produced during security testing/evaluation; and (b): Ensures that the independent agent is either provided with sufficient information to complete the verification process or granted the authority to obtain such information.